This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: 7d6xrl1zPOsYrVUVYSv3H2HgGRXlXtN9IrkZDdDPIiY= Subject key identifier: C1:E5:2F:2D:EF:90:FD:89:4D:FF:5C:3B:AC:9B:60:E7:68:9B:08:19 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 7165769FA4AD6C2EADAED1871802F75BD3D06E5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 01EA Signing time: Fri 19 Dec 2025 04:23:00 +0000 Manifest this update: Fri 19 Dec 2025 04:17:59 +0000 Manifest next update: Mon 22 Dec 2025 12:41:59 +0000 Files and hashes: 1: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: ncYGXRGoDNxvYIX3PcGqdrJLj1FxUvjJrqOvy1GAKxo=) 2: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: yBa5IGMI2gKs6BRLfBpa2JtCvlNab2f7FqKLIcrbRew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 12:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:65:76:9f:a4:ad:6c:2e:ad:ae:d1:87:18:02:f7:5b:d3:d0:6e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Dec 19 04:17:59 2025 GMT Not After : Dec 22 12:41:59 2025 GMT Subject: CN=C1E52F2DEF90FD894DFF5C3BAC9B60E7689B0819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:b7:f8:d1:5a:1b:ff:2c:55:d8:4c:2c:11: 1a:3a:9d:96:01:6b:3f:41:25:80:55:23:44:83:a5: 17:09:0e:6f:a5:79:10:6d:0f:4d:6a:69:d5:69:75: cd:ee:50:26:1f:27:b7:86:20:71:1a:55:46:ca:da: 89:64:77:e5:0f:c6:f0:f7:4f:6d:29:a1:cd:c2:ac: 59:53:26:36:b5:82:4e:63:64:c3:59:8f:42:0b:1b: 0d:f2:85:0b:76:8d:31:06:67:46:30:0d:d5:cf:82: b6:04:9f:24:41:22:97:4c:79:ce:01:97:ff:d6:03: c6:fc:71:67:2f:3e:cc:c0:89:d5:82:21:30:69:44: 54:54:c9:f3:29:41:c9:6a:76:18:5c:3c:00:a7:98: 16:53:06:dc:b6:da:de:f6:bc:08:09:81:a8:e5:d7: 7e:6a:27:36:64:dd:fe:c8:45:b8:07:6e:c0:9f:ce: 8c:08:e4:d4:c3:0b:a1:05:36:2f:45:41:54:55:1d: 31:29:50:71:0e:03:43:a8:61:95:02:1a:df:7f:6a: 9f:ca:ed:59:5c:82:09:45:35:7b:d7:1b:58:cb:97: 96:ef:16:27:44:fa:eb:70:d0:03:70:45:8d:1d:8a: 70:af:23:4b:fd:b0:94:06:f0:18:b3:cf:38:5c:5a: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E5:2F:2D:EF:90:FD:89:4D:FF:5C:3B:AC:9B:60:E7:68:9B:08:19 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:53:cc:a6:f8:0d:e4:ea:87:fd:1b:aa:c0:91:17:94:92:c0: b6:72:b3:26:ba:1e:82:ba:a6:d9:d4:08:6d:c6:e9:c7:23:1a: ca:3d:03:7b:e9:7b:6c:16:e2:b1:7c:df:6a:69:60:e8:d1:69: b3:ba:4c:db:e4:ff:77:b4:2c:ef:ea:8c:1e:1a:d4:13:90:5c: 89:5d:56:22:eb:25:22:53:c9:0b:8f:c3:71:62:23:c7:40:8e: 16:74:2c:b6:6c:5a:1c:b4:76:b2:4f:72:75:ac:68:ae:39:b1: 29:c1:54:94:e6:e7:be:27:08:47:90:72:91:d8:89:a1:0a:32: da:06:19:09:9d:aa:69:a0:c3:98:b6:42:25:91:6f:05:91:3f: e9:6b:c7:98:03:95:e7:84:eb:8a:49:63:cb:38:8e:6a:27:4a: 0c:ff:50:8e:7d:cf:7f:70:df:47:34:d5:d1:d5:17:98:e1:87: 25:18:43:62:a1:fe:61:58:17:07:61:94:d9:a6:a7:fc:4b:9b: 71:e9:a1:35:05:4b:5d:1e:4e:be:4e:ca:36:16:28:95:bb:f6: 97:b0:32:2d:db:54:49:61:39:20:ab:aa:90:4a:a5:34:fb:11: 88:3d:9c:f7:30:79:8e:df:1e:98:cd:e6:e6:21:42:f2:ea:d5: 8b:22:a1:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWV2n6StbC6trtGHGAL3W9PQbl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTEyMTkwNDE3NTlaFw0yNTEyMjIxMjQxNTlaMDMxMTAvBgNV BAMTKEMxRTUyRjJERUY5MEZEODk0REZGNUMzQkFDOUI2MEU3Njg5QjA4MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNrf40Vob/yxV2EwsERo6nZYB az9BJYBVI0SDpRcJDm+leRBtD01qadVpdc3uUCYfJ7eGIHEaVUbK2olkd+UPxvD3 T20poc3CrFlTJja1gk5jZMNZj0ILGw3yhQt2jTEGZ0YwDdXPgrYEnyRBIpdMec4B l//WA8b8cWcvPszAidWCITBpRFRUyfMpQclqdhhcPACnmBZTBty22t72vAgJgajl 135qJzZk3f7IRbgHbsCfzowI5NTDC6EFNi9FQVRVHTEpUHEOA0OoYZUCGt9/ap/K 7VlcgglFNXvXG1jLl5bvFidE+utw0ANwRY0dinCvI0v9sJQG8BizzzhcWmn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUweUvLe+Q/YlN/1w7rJtg52ibCBkwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFTzKb4DeTqh/0bqsCRF5SSwLZysya6HoK6 ptnUCG3G6ccjGso9A3vpe2wW4rF832ppYOjRabO6TNvk/3e0LO/qjB4a1BOQXIld ViLrJSJTyQuPw3FiI8dAjhZ0LLZsWhy0drJPcnWsaK45sSnBVJTm574nCEeQcpHY iaEKMtoGGQmdqmmgw5i2QiWRbwWRP+lrx5gDleeE64pJY8s4jmonSgz/UI59z39w 30c01dHVF5jhhyUYQ2Kh/mFYFwdhlNmmp/xLm3HpoTUFS10eTr5OyjYWKJW79pew Mi3bVElhOSCrqpBKpTT7EYg9nPcweY7fHpjN5uYhQvLq1YsioUQ= -----END CERTIFICATE-----Generated at Sun Dec 21 10:22:02 2025 by rpki-client